CVEvulnerability

CVE-2016-5385

8.1 HIGH Published 2016-07-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-07-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.1 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-601

Description

PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, as demonstrated by (1) an application that makes a getenv('HTTP_PROXY') call or (2) a CGI configuration of PHP, aka an "httpoxy" issue.

Affected configurations

• oracle communications user data repository 10.0.0 • oracle communications user data repository 10.0.1 • oracle communications user data repository 12.0.0 • oracle enterprise manager ops center 12.2.2 • oracle enterprise manager ops center 12.3.2 • oracle linux 6 • oracle linux 7 • fedoraproject fedora 23 • fedoraproject fedora 24 • hp storeever msl6480 tape library firmware (<= 5.09) • hp system management homepage (<= 7.5.5.0) • php php (>= 5.5.0 < 5.5.38) • php php (>= 5.6.0 < 5.6.24) • php php (>= 7.0.0 <= 7.0.8) • redhat enterprise linux desktop 6.0 • redhat enterprise linux server 6.0 • redhat enterprise linux workstation 6.0 • debian debian linux 8.0 • opensuse leap 42.1 • drupal drupal (>= 8.0.0 < 8.1.7)

Related

Weakness · CWE (1)

  • CWE-601 URL Redirection to Untrusted Site weakness

References